SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

AI is already in your workplace. From generative tools that create content in seconds to emerging agentic systems that can plan and take action, your workforce is experimenting, often without fully understanding the risks or responsibilities.
In-Person
In-Person
In-Person & Virtual
In-Person & Virtual
In-Person & Virtual
In-Person & Virtual
Speaker: Elodie Bridoux
Why do human driven cyber incidents keep repeating, despite years of awareness and training? Because most security decisions are not made in classrooms. They are made under pressure, in poorly designed processes, with tools and workflows that quietly reward insecure behavior.
In-Person & Virtual
Speaker: Pallavi Parab
Across many organizations, a pattern repeats itself. Phishing simulation runs. Results go to senior leadership. Employees who were tested hear nothing. No one knows if the organization passed or failed. A few months later, nothing has changed.
Virtual
Artificial intelligence (AI) is already reshaping Security Culture and Awareness work. From drafting communication to generating phishing simulation ideas and creating short videos in a couple of minutes. For many practitioners, that creates both opportunity and anxiety: if AI can do the work faster and cheaper, how will this change our role?
In-Person & Virtual
Speaker: Pratik Singh
Security culture does not improve through annual training, awareness posters, or phishing failure shaming. It improves when it is intentionally designed, measured, and continuously optimized using behavioral intelligence.
Virtual
Speaker: Deidre Diamond
Security awareness programs often focus on training content and phishing simulations — yet one of the largest drivers of human cyber risk is workforce instability, skills gaps, and retention challenges.
Virtual
Sara Mikail | From CISO Says No to Partner in Yes
Tim Ward | Overview of Behavior Models
Gabi Beasca | What a Spicy Campaign Can Teach Us About Executive Buy-In
Elsie Brown | What AI Becomes the Crisis: What 100+ Simulations Reveal About Human Behavior Under Pressure
In-Person & Virtual
Speakers: Samantha Phillips & Corey Bolger
Most organizations measure security culture through surveys, phishing simulations, and training metrics. While useful, these approaches often miss something critical: why employees make the decisions they do. Without understanding the underlying type of security culture in an organization, interventions can feel generic, misaligned, or ineffective.
Virtual
In-Person & Virtual
We’ve made real progress in security awareness, helping people recognise and respond to threats more effectively than ever before. But what happens when the threats no longer look like threats at all?
In-Person & Virtual
Security awareness teams are expected to create engaging, interactive training, but many lack the time, budget or development resources to build anything beyond static content. This hands-on workshop introduces vibe coding: a practical approach to using generative AI as a creative and technical partner to co-build interactive training experiences; without traditional coding skills.
In-Person
Speaker: Ashley Savageau
At Postman, we recognized that traditional security awareness training was failing. It didn’t make the company safer but it did make our employees cranky.
In-Person & Virtual
In-Person & Virtual
In-Person & Virtual
I spent six months redesigning a security team's materials. New structure, clearer guidance, knowledge organised around the questions people ask. It looked great. Within six months, the team reverted to blocking behaviours. We'd rearranged the furniture without changing how security saw itself.
In-Person & Virtual
Let's name the thing nobody says out loud: most security awareness officers are the only person on the security team who's never invited into operational conversations. The SOC doesn't ask for your input. GRC doesn't include you in risk assessments. Security Architecture doesn't consult you on control design. You make posters. You send phishing simulations. You wonder if anyone takes you seriously. This workshop exists to change that - permanently!
In-Person
For a long time, Security Awareness and Incident Response teams operated as separate silos. CSIRT handles technical breaches, while Awareness teams lead compliance and education initiatives. However, there is little structured exchange between these functions. This disconnect creates a critical intelligence gap:
In-Person & Virtual
Speakers: Malgorzata Grabiec & Agata Labecka
Building a secure culture at scale it is quite a challenge, especially if you are responsible for driving awareness program in big, global companies - where local lenses make all the difference. We also have been there, trying our best to deliver meaningful awareness initiatives, utilizing mostly feedback about the local human risks.
In-Person & Virtual
In-Person & Virtual
In-Person
In-Person
In-Person
In-Person & Virtual
In-Person & Virtual
Speakers to be announced.
In-Person & Virtual
In-Person & Virtual
Speaker: Mark Sayewich
Every SaaS platform invests heavily in securing its own infrastructure. Almost none invest in building the security capabilities of the people using it. That gap is where incidents live, and where this session starts.
In-Person & Virtual
In-Person
In-Person & Virtual
Speaker: Gustavo Giovanetti
The most significant security gap in modern organizations isn't in the cloud; it’s on the front lines. While cybersecurity evolves at the speed of AI, a vast portion of the global workforce operates in physical, high-pressure environments with varying levels of digital maturity. These employees are often neglected by traditional, screen-based awareness programs, leaving them—and their companies—vulnerable.
In-Person & Virtual
Speaker: Nadine Rose-Smith, Nestle
Mandatory security awareness training is widely deployed, yet frequently criticised for low engagement and limited impact on real-world behaviour. This
case study shares how one global organisation redesigned its mandatory programme to address a specific challenge the awareness community continues
to struggle with:
In-Person & Virtual
In-Person & Virtual
Security awareness teams are being asked to reduce risky behavior—while employees move faster, collaborate more, and increasingly use AI tools. The result is a familiar pattern: training completion looks great, but everyday data mistakes persist (mis-sends, over-sharing, wrong permissions, and “AI copy/paste” of sensitive content).
In-Person & Virtual
Speaker: Angela Rivas
Organizational changes shouldn’t derail your Security Champions program. In this hands‑on workshop, you’ll build a practical, outcome‑based operating model that survives leadership turnover. Using the E2I‑C method (baseline → map → instrument → pilot → roll out), you’ll map activities to outcomes with the Connect / Find / Fix / Prevent (C/F/F/P) framework, define manager‑friendly metrics (visibility, consistency, AI readiness, behavior), and assemble a leadership dashboard leaders can evaluate and iterate.
In-Person
In-Person & Virtual
You ARE the IT department. You are also the security team, the awareness program, and the culture change initiative. You have no budget, no dedicated staff, and a workforce that clicks through compliance training and forgets everything by Friday.
In-Person & Virtual
In-Person & Virtual